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DEPARTMENT  OF  ENERGY 
10  CFR  Part  1008 

Privacy  Act;  Records  Maintained  on 
Individuals 

agency:  Department  of  Energy. 
action:  Proposed  regulations. 

SUMMARY:  These  regulations  propose 
the  procedures  to  be  followed  and  the 
substantive  principles  to  be  applied  by 
the  Department  of  Energy  (DOE)  in 
implementing  its  responsibilities  under 
the  Privacy  Act  of  1974,  5  U.S.C.  552a 
(Privacy  Act).  The  regulations  set  forth 
the  procedures  under  which  individuals 
may  seek  access  to  their  records  and 
request  correction  of  those  records.  The 
regulations  also  set  forth  employee 
standards  of  conduct  with  regard  to 
personal  records  within  the  scope  of  the 
Privacy  Act.  Additionally,  there  are 
provisions  pertaining  to  the 
dissemination  of  records  of  parties  other 
than  the  requesting  individual  and 
provisions  applicable  to  the 
Department’s  establishment  and 
maintenance  of  systems  of  records. 

These  regulations  are  also  applicable  to 
contractors  and  their  employees  to  the 
extent  required  by  5  U.S.C.  552a(m). 

COMMENT  date:  June  26. 1980. 

ADDRESS:  Interested  persons  are  invited 
to  submit  written  comments  with 
respect  to  the  proposed  guidelines  to: 
Kenneth  E.  Cohen,  Acting  Assistant 
General  Counsel  for  Legal  Counsel, 

Room  6H-058,  Forrestal  Building,  1000 
Independence  Avenue  SW., 

Washington,  D.C.  20585,  (202)  252-8618. 

FOR  FURTHER  INFORMATION  CONTACT. 

Leslie  Borden  Greenspan,  Office  of 
General  Counsel,  Forrestal  Building, 
1000  Independence  Avenue  SW., 
Washington,  D.C.  20585,  (202)  252- 
8618. 

Milton  Jordan,  Office  of  Administrative 
Services,  Room  5B-138,  Forrestal 
Building,  1000  Independence  Avenue 
SW.,  Washington,  DC  20585,  (202) 
252-5955. 

SUPPLEMENTARY  INFORMATION: 

I.  Background 

II.  Discussion 

III.  Revocations 

IV.  Other  Procedural  Considerations 

V.  Comment  Procedures 

I.  Background 

The  DOE  was  established  by  the 
Department  of  Energy  Organization  Act 
(Pub.  L.  95-91)  (the  Act),  which  became 
effective  on  October  1, 1977  pursuant  to 
Executive  Order  12009,  dated  September 
13, 1977  (42  FR  46267,  September  15, 
1977).  The  Act  transfers  to  and  vests  in 


the  DOE  the  functions  of  the  former 
Federal  Energy  Administration,  the 
Energy  Research  and  Development 
Administration,  and  specified  functions 
of  several  other  agencies,  including  the 
Department  of  Interior.  These 
regulations  represent  a  consolidation, 
with  some  procedural  adaptation,  of  the 
Privacy  Act  regulations  previously 
followed  by  the  Federal  Energy 
Administration  and  the  Energy  Research 
and  Development  Administration,  two 
of  the  major  components  of  the  new 
Department.  The  regulations  apply  to  all 
Privacy  Act  matters  pertaining  to  the 
Department,  except  that  they  do  not 
apply  to  the  Federal  Energy  Regulatory 
Commission  (FERC),  an  independent 
collegial  body  within  DOE. 

II.  Discussion 

These  regulations  establish  a 
procedure  that  geographically 
decentralizes  the  administration  of  the 
DOE’s  program  for  implementing  the 
Privacy  Act  of  1974  to  various  DOE  field 
locations  and  appropriate  Privacy  Act 
Officers,  to  be  designated  by  the 
Director,  Office  of  Administration.  Each 
Privacy  Act  Officer  will  be  responsible 
for  the  following:  (i)  Advising  all  DOE 
personnel  of  the  provisions,  including 
the  criminal  penalties  and  civil 
liabilities  of  the  Privacy  Act  and  of  their 
responsibilities  thereunder  and  (ii)  the 
initial  processing  of  requests,  including 
verifying  the  identity  of  individuals 
making  request  for  access  to  or 
correction  of  records  and  identifying  the 
System  Manager  or  Managers  within  the 
Department  that  maintain  the  records 
which  are  the  subject  of  such  requests. 

Each  Privacy  Act  Officer  will  make 
decisions  pertaining  to  the  validity  of 
requests  under  these  regulations, 
coordinate  the  collection  of  records  from 
the  System  Manager  or  Managers,  and 
be  responsible  for  preparing  responses 
granting  or  denying  requests. 
Indentification,  collection  and  review  of 
records  to  determine  whether  to  grant 
access  or  to  correct  a  record  are  within 
the  responsibility  and  authority  of  the  • 
System  Manager,  and  Managers 
maintaining  the  records  who,  after 
reviewing  the  material  shall  transmit  a 
recommended  decision  to  the  Privacy 
Act  Officer;  consultation  with  the 
concurrence  of  DOE  General  Counsel  is 
required. 

Appeals  of  initial  decisions,  whether 
from  the  Headquarters  or  any  field 
office,  will  continue  to  be  directed  only 
to  the  DOE,  Office  of  Hearings  and 
Appeals. 

The  administrative  appeal  procedures 
in  section  1008.11  of  these  regulations 
are  applicable  only  to  denials  of 
requests  for  records  maintained  by  DOE 


on  its  own  behalf.  They  do  not  apply  to 
the  government-wide  systems  that  have 
been  reported  by  the  Office  of  Personnel 
Management  (OPM),  but  are  in  the 
custody  of  DOE.  Appeals  of  denials  of 
access  and  amendment  of  these  records 
are  governed  by  OPM  regulations  5  CFR 
Part  297  published  at  (44  FR  65031, 
November  9, 1979),  and  are  to  be 
directed  to  the  Assistant  Director  for 
Agency  Compliance  and  Evaluations, 
OPM. 

The  Privacy  Act  defines  certain 
substantive  parameters  within  which 
Federal  agencies  administer  their 
Privacy  Act  programs.  These 
substantive  provisions  (pertaining,  for 
example,  to  the  types  of  records  which 
may  be  maintained  by  an  agency,  the 
accounting  of  disclosures,  the  exemption 
of  certain  information  from  disclosure, 
and  the  exemptions  permitting 
disclosure  to  third  parties)  are  reflected 
in  these  regulations,  and  in  most 
practical  respects  represent  a 
consolidation  of  parallel  provisions 
appearing  in  the  regulations  of  the 
Department’s  predecessor  agencies.  The 
regulations,  however,  include  additional 
guidance  pertaining  to  several  aspects  of 
the  Privacy  Act  program.  First,  although 
the  Privacy  Act  does  not  specifically 
require  it,  the  regulations  provide  for  an 
administrative  appeal  from  initial 
denials  of  access  to  requested  records. 
Second,  although  there  are  no  time 
limits  in  the  Privacy  Act  for  the 
processing  of  requests  or  appeals,  the 
regulations  set  forth  time  periods  in  this 
regard.  The  processing  of  initial  requests 
for  access  shall  be  accomplished 
promptly,  with  every  effort  being  made 
to  respond  within  ten  working  days  of 
the  date  of  receipt.  Actions  on  initial 
requests  for  correction  or  amendment 
and  all  actions  on  appeal  are  to  be  taken 
within  20  working  days  of  receipt  of  the 
request.  These  provisions  make  the  time 
periods  for  the  processing  of  Privacy  Act 
actions  consistent  with  those  required 
by  statute  for  the  processing  of  requests 
and  appeals  under  the  Freedom  of 
Information  Act.  Moreover,  the 
regulations  also  make  it  clear  that  the 
Freedom  of  Information  Act  exemptions 
shall  not  be  invoked  to  limit  an 
individual's  access  to  records  pertaining 
to  him  to  which  he  is  entitled  under  the 
Privacy  Act.  * 

Section  1008.12(a)(2)  exempts,  under 
subsection  (j)(2)  of  the  Privacy  Act,  the 
Inspector  General’s  investigative  files. 
Under  subsection  (j)(2),  an  agency  or 
agency  component  whose  principal 
function  is  "any  activity  pertaining  to 
the  enforcement  of  criminal  laws  *  *  *.” 
may  exempt  systems  of  records  which 
include  information  compiled  for 
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criminal  investigation  from  many 
provisions  of  the  Privacy  Act. 

The  Inspector  General’s  investigative 
files  may  be  exempted  under  subsection 
(j)(2)  exemption  because  the  principal 
function  of  the  Office  of  the  Inspector 
General  is — 

“to  supervise,  coordinate,  and  provide  policy 
direction  for  auditing  and  investigative 
activities  relating  to  the  promotion  of 
economy  and  efficiency  in  the  administration 
of,  or  the  prevention  or  detection  of  fraud  or 
abuse  in,  programs  and  operations  of  the 
Department  *  *  (Section  208(b),  DOE 
Organization  Act,  Pub.  L.  No.  95-91.) 

These  records  are  compiled  by  the 
Inspector  General  in  the  course  of 
criminal  investigations. 

The  system  would  be  exempted  from 
the  following  requirements:  to  provide 
individual  access  to  and  amendment  of 
records  and  accounting  for  disclosures; 
to  collect  information  where  possible 
from  the  subject  individual;  to  inform 
the  individual  of  the  authority,  purpose, 
and  uses  to  be  made  of  the  information 
and  of  the  disclosure  of  records  under 
compulsory  legal  process;  and  to 
describe  the  individual  access  and 
amendment  procedures.  The  system 
would  also  be  exempted  from  the 
standards  of  accuracy  and  relevance. 

III.  Revocations 

These  regulations,  when  adopted,  will 
supersede  the  Privacy  Act  regulations 
for  the  Energy  Research  and 
Development  Administration  (10  CFR 
Part  708)  and  the  Federal  Energy 
Administration  (10  CFR  Part  206).  At  the 
time  these  regulations  become  final,  the 
above-cited  regulations  of  the 
predecessor  agencies  of  the  DOE  will  be 
revoked. 

IV.  Other  Procedural  Considerations 

In  accordance  with  Council  on 
Environmental  Quality  regulations  (40 
CFR  Parts  1500-1508)  for  implementing 
the  procedural  provisions  of  the 
National  Environmental  Policy  Act,  no 
Environmental  Assessment  or 
Environmental  Impact  Statement  is 
necessary  for  the  publication  of  these 
proposed  regulations  since  these 
regulations  do  not  affect  the  quality  of 
the  environment. 

In  accordance  with  section  501(c)(1)  of 
the  Department  of  Energy  Organization 
Act,  DOE  has  determine  that  these 
regulations  present  no  substantial  issue 
of  fact  or  law,  and  are  unlikely  to  have  a 
substantial  impact  on  the  economy  or 
large  numbers  of  individuals  or 
businesses.  Accordingly,  no  public 
hearing  is  required. 

The  DOE  has  also  determined  that 
this  document  is  not  a  significant 
regulation  requiring  preparation  of  a 


regulatory  analysis  under  Executive 
Order  12044,  as  implemented  by  DOE 
Order  2030.1,  since  the  anticipated 
effects  of  the  proposal,  if  made  final, 
would  be  primarily  to  provide  internal 
guidance  for  the  implementation  of  the 
Privacy  Act. 

Interested  persons  are  invited  to 
submit  written  comments  with  respect 
to  the  proposed  guidelines  to:  Kenneth 
E.  Cohen,  Acting  Assistant  General 
Counsel  for  Legal  Counsel,  Room  6H- 
058,  Forrestal  Building,  1000 
Independence  Avenue  SW., 

Washington,  D.C.  20585,  (202)  252-8618. 

Comments  should  be  identified  on  the 
outside  envelope  and  on  documents 
submitted  to  DOE  with  the  designated 
Privacy  Act  Regulations.  Any 
information  or  data  considered  by  the 
person  furnishing  it  to  be  confidential 
must  be  so  identified  and  submitted  in 
writing.  The  DOE  reserves  the  right  to 
determine  the  confidential  status  of  the 
information  or  data  and  to  treat  it 
according  to  its  determination. 
Comments  should  be  provided  on  or 
before  June  26, 1980. 

(Department  of  Energy  Organization  Act, 

Pub.  L.  95-91,  Executive  Order  12091,  42  FR 
46267,  Privacy  Act  of  1974,  Pub.  L.  93-579  (5 
U.S.C.  552a)) 

In  consideration  of  the  foregoing,  it  is 
proposed  that  the  regulations  set  forth 
below  be  adopted. 

Issued  in  Washington,  D.C.,  on  May  16, 
1980. 

Charles  W.  Duncan,  Jr., 

Secretary. 

PART  1008 — RECORDS  MAINTAINED 
ON  INDIVIDUALS  (PRIVACY  ACT) 

Subpart  A— General  Provisions 

Sec. 

1008.1  Purpose  and  scope. 

1008.2  Definitions. 

1008.3  Employee  standards  of  conduct  with 
regard  to  privacy. 

1008.4  Procedures  for  identifying  the 
individual  making  a  request  for  access  to 
or  amendment  of  records. 

1008.5  Effects  of  the  Freedom  of  Information 
Act. 

Subpart  B— Requests  for  Access  or 
Amendment 

1008.6  Procedures  for  requesting 
information  about  or  for  access  to  or 
correction  or  amendment  of  an 
individual's  own  records  in  a  system  of 
records.  ^ 

1008.7  Processing  of  requests. 

1008.8  Action  in  response  to  a  request  for 
access:  Disclosure  of  requested 
information  to  subject  individuals. . 

1008.9  Action  in  response  to  a  request  for 
access:  Initial  denial  of  access. 

1008.10  Action  in  response  to  a  request  for 
correction  or  amendment  of  records. 


1008.11  Appeals  of  denials  of  requests 
pursuant  to  §  1008.6. 

1008.12  Exemptions. 

1008.13  Fees. 

1008.14  Requests  under  false  pretenses. 
Subpart  C— Disclosure  to  Third  Parties 

1008.15  Prohibition  against  disclosure. 

1008.16  Conditions  of  disclosure. 

1008.17  Accounting  for  disclosures. 

Subpart  D— Maintenance  and  Establishment 
of  Systems  of  Records 

1008.18  Content  of  systems  of  records. 

1008.19  Collection  of  information  by  DOE 
about  an  individual  for  a  system  of 
records. 

1008.20  Use  and  collection  of  social  security 
numbers. 

1008.21  Public  notice  of  systems  of  records. 
Authority:  (Department  of  Energy 

Organization  Act,  Pub.  L.  95-91,  Executive 
Order  12091,  42  FR  46267,  Privacy  Act  of  1974, 
Pub.  L.  93-579  (5  U.S.C.  552a)). 

Subpart  A— General  Provisions 

§  1008.1  Purpose  and  scope. 

(a)  This  part  establishes  the 
procedures  to  implement  the  Privacy  Act 
of  1974  (Pub.  L.  93-579,  5  U.S.C.  552a.) 
within  the  Department  of  Energy. 

(b)  This  part  applies  to  all  systems  of 
records,  as  defined  in  §  1008.2(m), 
maintained  by  DOE. 

(c)  This  part  applies  to  all  divisions 
within  the  DOE,  and  to  the  personnel 
records  of  the  Federal  Energy 
Regulatory  Commission  (FERC),  which 
are  maintained  by  DOE  on  behalf  of 
FERC.  These  regulations  do  not  apply  to 
other  systems  of  records  maintained  by 
FERC.  These  regulations  also  apply  to 
DOE  contractors  and  their  employees  to 
the  extent  required  by  5  U.S.C.  552a(m). 

§1008.2  Definitions 

(a)  “Department”  or  “Department  of 
Energy  (DOE)”  means  all  organizational 
entities  which  are  a  part  of  the 
executive  department  created  by  Title  II 
of  the  Department  of  Energy 
Organization  Act,  Pub.  L.  95-91,  except 
the  Federal  Energy  Regulatory 
Commission  (FERC). 

(b)  “Director,  Office  of  Hearings  and 
Appeals”  means  the  Director  or  his 
delegate. 

(c)  “DOE  locations”  means  each  of  the 
following  DOE  components: 

(1)  Alaska  Power  Administration,  P.O. 
Box  50,  Juneau,  AK  88801. 

(2)  Albuquerque  Operations  Office,  P.O. 
Box  5400,  Albuquerque,  NM  87115. 

Note. — This  office  has  cognizance  over  the 
following  area  offices:  Amarillo,  Dayton, 
Kansas  City,  Los  Alamos,  Pinellas,  Rocky 
Flats  and  Sanria. 

(3)  Bartlesville  Energy  Technology 
Center,  P.O.  Box  1398,  Bartlesville,  OK 
74003. 
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(4)  Bonneville  Power  Administration, 

P.O.  Box  3621,  Portland,  OR  97268. 

(5)  Chicago  Operations  Office,  9800 
South  Cass  Avenue,  Argonne,  IL 
60439. 

Note. — This  office  has  cognizance  over  the 

Batvia  and  Brookhaven  area  offices  and  the 

New  Brunswick  laboratory. 

(6)  Grand  Forks  Energy  Technology 
Center,  P.O.  Box  8213,  University 
Station,  Grand  Forks,  ND  58201. 

(7)  Grand  Junction  Office,  P.O.  Box  2567, 
Grand  Junction,  CO  81502. 

(8)  Headquarters,  Department  of  Energy, 
1000  Independence  Avenue,  SW., 
Washington,  DC  20585. 

(9)  Idaho  Operations  Office,  550  2nd 
Street,  Idaho  Falls,  ID  83401 

(10)  Laramie  Energy  Technology  Center, 
P.O.  Box  3395,  University  Station, 
Laramie,  WY  82070. 

(11)  Morgantown  Energy  Technology 
Center,  P.O.  Box  880,  Morgantown, 

WV  26505. 

(12)  Nevada  Operations  Office,  P.O.  Box 
14100,  Las  Vegas,  NV  89114 

(13)  Oak  Ridge  Operations  Office,  P.O. 
Box  E,  Oak  Ridge,  TN  37830. 

(14)  Oak  Ridge  Technical  Information 
Center,  P.O.  Box  62,  Oak  Ridge,  TN 
37830. 

(15)  Pittsburgh  Energy  Technology 
Center,  4800  Forbes  Avenue, 

Pittsburgh,  PA  15213. 

(16)  Region  I:  Analex  Building,  Room 
700, 150  Causeway  Street,  Boston,  MA 
02114. 

(17)  Region  II:  26  Federal  Plaza,  Room 
3206,  New  York,  NY  10007. 

(18)  Region  III:  1421  Cherry  Street,  10th 
Floor,  Philadelphia,  PA  19102. 

(19)  Region  IV:  1655  Peachtree  Street, 

NE,  8th  Floor,  Atlanta,  GA  30309. 

(20)  Region  V:  175  West  Jackson 
Boulevard,  Room  A-333,  Chicago,  IL 
60604. 

(21)  Region  VI:  P.O.  Box  35228,  2626 
West  Mockingbird  Lane,  Dallas,  TX 
75235. 

(22)  Region  VII:  Twelve  Grand  Building, 
1150  Grand  Avenue,  Kansas  City,  MO 
64106. 

(23)  Region  VIII:  P.O.  Box  26247 — Belmar 
Branch,  1075  South  Yukon  Street, 
Lakewood,  CO  80226. 

(24)  Region  IX:  111  Pine  Street,  Third 
Floor,  San  Francisco,  CA  94111. 

(25)  Region  X:  1992  Federal  Building,  915 
Second  Avenue,  Seattle,  WA  98174. 

(26)  Richland  Operations  Office,  P.O. 

Box  550,  Richland,  WA  99352. 

(27)  San  Francisco  Operations  Office, 
1333  Broadway,  Wells  Fargo  Building, 
Oakland,  CA  94612. 

(28)  Savannah  River  Operations  Office, 
P.O.  Box  "A”  Aiken,  SC  29801. 

(29)  Southeastern  Power  Administration, 
Elberton,  GA  30635. 


(30)  Southwestern  Power 

Administration,  P.O.  Drawer  619, 

Tulsa,  OK  74101. 

(31)  Western  Area  Power 

Administration,  P.O.  Box  3402, 

Golden,  CO  80401. 

(d)  “General  Counsel”  means  the 
General  Counsel  provided  for  in  section 
202(b)  of  the  Department  of  Energy 
Organization  Act,  or  any  DOE  attorney 
designated  by  the  General  Counsel. 

(e)  “Headquarters”  means  all  DOE 
facilities  functioning  within  the 
Washington,  D.C.  metropolitan  area. 

(f)  “Individual”  means  a  citizen  of  the 
United  States  or  an  alien  lawfully 
admitted  for  permanent  residence,  but 
does  not  include  proprietorships, 
businesses,  or  corporations.  Where 
appropriate,  the  term  “individual”  also 
includes  a  duly  authorized 
representative  of  an  individual. 

(g)  “Maintain”  means  maintain, 
collect,  use,  or  disseminate. 

(h)  “Privacy  Act  Officer"  means  the 
person  designated  by  the  Director, 

Office  of  Administration,  as  responsible 
for  administering  the  DOE’s  program  for 
implementing  the  requirements  of  the 
Privacy  Act  of  1974  at  the  DOE  locations 
listed  at  §  1008.2(c). 

(i)  “Record”  means  any  item, 
collection,  or  grouping  of  information 
about  an  individual  that  is  maintained 
by  or  for  the  DOE  including,  but  not 
limited  to,  education,  financial 
transactions,  medical  history,  and 
criminal  or  employment  history,  and 
that  contains  that  individual’s  name,  or 
other  identifying  number,  symbol,  or 
other  identifying  particulars  assigned  to 
the  individual,  such  as  a  finger  or  voice 
print  or  photograph. 

(j)  "Routine  use"  means,  with  respect 
to  the  disclosure  of  a  record,  the  use  of 
such  record  for  a  purpose  which  is 
compatible  with  the  purpose  for  which  it 
was  collected. 

(k)  “Statistical  record”  means  a  record 
in  a  system  of  records  maintained  for 
statistical  research  or  reporting 
purposes  only  and  not  used  in  whole  or 
in  part  in  making  any  determination 
about  an  identifiable  individual,  except 
as  provided  by  13  U.S.C.  section  8. 

(l)  “System  Manager”  means  the  DOE 
official  who  is  responsible  for  a  system 
of  records  as  designated  in  the  system 
notice  of  that  system  of  records 
published  by  DOE. 

(m)  “System  of  records”  means  a 
group  of  any  records  under  DOE  control 
from  which  information  is  retrieved  by 
the  name  of  the  individual  or  by  some 
identifying  number,  symbol,  or  other 
identifying  particulars  assigned  to  the 
individual. 


§  1008.3  Employee  standards  of  conduct 
with  regard  to  privacy. 

(aj  The  Headquarters  DOE  Privacy 
Act  Officer  shall  assure  that  DOE 
personnel  are  advised  of  the  provisions 
of  the  Privacy  Act,  including  the 
criminal  penalties  and  civil  liabilities 
provided  therein,  and  that  DOE 
personnel  are  made  aware  of  their 
responsibilities:  To  protect  the  security 
of  personal  information  to  assure  its 
accuracy,  relevance,  timeliness  and 
completeness;  to  avoid  unauthorized 
disclosure;  and  to  insure  that  no  system 
of  records  concerning  individuals,  no 
matter  how  insignificant  or  specialized, 
is  maintained  without  public  notice. 

(b)  DOE  personnel  shall: 

(1)  Collect  or  maintain  no  information 
of  a  personal  nature  about  individuals 
unless  relevant  and  necessary  to 
achieve  a  purpose  or  carry  out  a 
responsibility  of  the  DOE  as  required  by 
statute  or  by  executive  order. 

(2)  Collect  information,  wherever 
possible,  directly  from  the  individual  to 
whom  it  pertains. 

(3)  Inform  individuals  from  whom 
information  is  collected  of  the  authority 
for  collection,  the  principal  purposes  for 
which  the  information  will  be  used,  the 
routine  uses  that  will  be  made  of  the 
information,  and  the  effects  of  not 
furnishing  the  information. 

(4)  Collect,  maintain,  use  or 
disseminate  no  information  concerning 
an  individual’s  rights  guaranteed  by  the 
First  Amendment,  unless  (i)  the 
individual  has  volunteered  such;  or  (ii) 
the  information  is  expressly  authorized 
by  statute  to  be  collected,  maintained, 
used  or  disseminated;  or  (iii)  the 
activities  involved  are  pertinent  to  and 
within  the  scope  of  an  authorized  law 
enforcement  activity. 

(5)  Advise  their  supervisors  of  the 
existence  or  proposal  of  any  system  of 
records  which  retrieves  information 
about  individuals  by  the  individual’s 
name  or  other  identifying  number, 
symbol,  or  identifying  particulars 
assigned  to  the  individual. 

(6)  Maintain  an  accounting,  in  the 
prescribed  form,  of  all  disclosures  of 
information  other  than  those  to  officers 
or  employees  who  have  a  need  for  the 
record  in  the  performance  of  their  duties 
and  those  required  under  the  Freedom  of 
Information  Act. 

(7)  Disclose  no  records  other  than  to 
DOE  personnel,  except  when  authorized 
by  5  U.S.C.  552a  or  pursuant  to  a  routine 
use  published  in  the  Federal  Register. 

(8)  Maintain  and  process  information 
concerning  individuals  with  care  to 
insure  that  no  inadvertent  disclosure  of 
the  information  is  made. 

(9)  Inform  the  proper  DOE  authorities 
of  any  information  maintained  in  a  DOE 
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system  of  records  which  is  not  • 
authorized  by  the  Privacy  Act  of  1974. 

(c)  Heads  of  Headquarters  Divisions 
and  Offices  and  heads  of  the  other  DOE 
locations  shall  review  annually  the 
systems  of  records  subject  to  their 
responsibility  to  insure  compliance  with 
the  requirements  of  the  Privacy  Act  of 
1974. 

§  1008.4  Procedures  for  identifying  the 
individual  making  a  request  for  access  to  or 
amendment  of  records. 

(a)  When  a  request  for  information 
about  or  for  access  to  or  correction  of  a 
record  pertaining  to  an  individual  and 
contained  in  a  system  of  records  has 
been  made  pursuant  to  §  1008.6  valid 
identification  of  the  individual  making 
the  request  shall  be  required  before 
information  will  be  given,  access  be 
granted  or  a  correction  considered,  to 
insure  that  information  is  given, 
corrected,  or  records  disclosed  or 
corrected  only  at  the  request  of  the 
proper  person. 

(b)  Subject  to  paragraphs  (c)  and  (d) 
of  this  section,  an  individual  making  a 
request  may  establish  his  identity  by: 

(1)  Including  with  his  request,  if 
submitted  by  mail,  a  photocopy  of  two 
identifying  documents  bearing  his  name 
and  signature,  one  of  which  shall  bear 
his  current  home  or  business  address 
and  date  of  birth;  or 

(2)  Appearing  at  the  appropriate  DOE 
location  during  the  regular  business 
hours  and  presenting  either  of  the 
following: 

(i)  One  identifying  document  bearing 
the  individual’s  photograph  and 
signature,  such  as  a  driver’s  license  or 
passport;  or 

(ii)  Two  identifying  documents 
bearing  the  individual’s  name  and 
signature,  one  of  which  shall  bear  the 
individual’s  current  home  or  business 
address  and  date  of  birth;  or 

(3)  Providing  such  other  proof  of 
identity  as  the  Privacy  Act  Officer 
deems  satisfactory  in  the  circumstances 
of  a  particular  request. 

(c)  If  the  Privacy  Act  Officer  or  the 
appropriate  System  Manager  determines 
that  the  information  in  a  record  is  so 
sensitive  that  unauthorized  access  could 
cause  harm  or  embarrassment  to  the 
individual  whose  record  is  involved,  or 
if  the  individual  making  the  request  is 
unable  to  produce  satisfactory  evidence 
of  identity  under  paragraph  (b)  or  (d)  of 
this  section,  the  individual  making  the 
request  may  be  required  to  submit  a 
notarized  statement  attesting  to  his 
identity  and  his  understanding  of  the 
criminal  penalties  provided  under 
section  1001  of  Title  18  of  the  United 
States  Code  for  making  false  statements 
to  a  Government  agency  and  under 


section  552a(i)(3)  of  the  Act  for 
obtaining  records  under  false  pretenses. 
Copies  of  these  statutory  provisions  and 
forms  of  such  notarized  statements  may 
be  obtained  upon  request  from  the 
Privacy  Act  Officer,  Headquarters, 
Department  of  Energy,  Washington,  D.C. 

(d)  When  an  individual  acting  as  the 
parent  of  a  minor  or  the  legal  guardian 
of  the  person  to  whom  a  record  pertains 
makes  a  request  pursuant  to  §  1008.6  of 
this  part — 

(1)  Such  an  individual  shall  establish 
his  personal  identity  in  the  same  manner 
required  in  either  paragraphs  (b)  or  (c) 
of  this  section. 

(2)  In  addition,  such  an  individual 
shall  establish  his  identity  in  the 
representative  capacity  of  parent  or 
legal  guardian.  In  the  case  of  the  parent 
of  a  minor,  the  proof  of  identity  shall  be 
a  certified  or  authenticated  copy  of  the 
minor’s  birth  certificate.  In  the  case  of 
the  legal  guardian  of  a  person  who  has 
been  declared  incompentent  due  to 
physical  or  mental  incapacity  or  age  by 
a  court  of  competent  jurisdiction,  the 
proof  of  identity  shall  be  a  certified  or 
authenticated  copy  of  the  order  from  a 
court  of  competent  jurisdiction. 

(3)  A  parent  or  legal  guardian  may  act 
only  for  a  living  individual,  not  for  a 
decedent. 

§  1008.5  Effect  of  the  Freedom  of 
Information  Act  (FOIA). 

(a)  DOE  shall  not  rely  on  any 
exemption  contained  in  the  Freedom  of 
Information  Act  (5  U.S.C.  552)  to 
withhold  from  the  individual  to  whom  it 
pertains,  any  record  which  is  otherwise 
accessible  to  such  individual  under  this 
part. 

(b)  DOE  shall  rely  on  section  (b)  of  the 
Privacy  Act  to  withhold  information 
from  a  person  other  than  the  person  to 
whom  the  record  pertains  only  when  the 
information  is  also  exempt  from 
disclosure  under  the  FOIA. 

(c)  Where  a  request  for  access  to 
records  is  submitted  pursuant  to  both 
the  FOIA  and  the  Privacy  Act,  the  DOE 
shall,  to  the  maximum  extent  possible, 
process  the  request  under  the  provisions 
of  this  part,  including  the  timing 
requirements  of  this  part. 

Subpart  B— Requests  for  Access  or 
Amendment 

§  1008.8.  Procedures  for  requesting 
information  about  or  for  access  to  or 
correction  or  amendment  of  an  individual's 
own  records  in  a  system  of  records. 

(a)  Any  individual  may  request 
information  regarding  whether  a  system 
of  records  maintained  by  the  DOE 
contains  any  information  pertaining  to 
him,  and  may  request  access  to  this 
information.  Any  individual  may  also 


request  the  correction  or  amendment  of 
information  pertaining  to  him  that  is 
contained  in  a  system  of  records. 
Requests  may  be  made  by  mail  or  in 
person  during  DOE’s  regular  business 
hours  and  shall  be  directed  to  the 
Privacy  Act  Officer  at  the  appropriate 
DOE  location  at  the  address  listed  in 
§  1008.2(c). 

(b)  Requests  submitted  pursuant  to 
this  section  shall  comply  with  the 
following  provisions: 

(1)  The  request,  whether  by  mail  or  in 
person,  shall  be  in  writing  and  signed  by 
the  individual  making  the  request.  It 
should  state  that  this  request  is  a 
"Privacy  Act  Access”  or  a  “Privacy  Act 
Amendment”  request  and  shall  include 
any  information  required  by  §  1008.4  to 
be  submitted  for  identification  purposes. 

(2)  In  addition,  the  request  should: 

(i)  Specify  the  title  and  identifying 
number  of  the  system  of  records  which 
appears  in  the  notice  of  systems  of 
records  published  in  the  Federal 
Register  by  the  DOE  or  its  predecessor 
agencies,  as  appropriate. 

(ii)  Provide  additional  identifying 
information  (consistent  with  the  terms  of 
the  system  notice)  which  may  assist 
DOE  in  responding  to  the  request;  and 

(iii)  Describe  the  information  sought 
and  the  time,  place,  or  form  of  access,  as 
appropriate. 

(3)  A  request  for  correction  or 
amendment  of  a  record  may  be  made  by 
any  individual  if  the  requester  believes 
that  it  is  not  accurate,  relevant,  timely, 
or  complete.  Amendment  requests  may 
include  inquiries  concerning — 

(i)  Whether  such  information  is 
relevant  or  necessary  to  accomplish  a 
purpose  that  DOE  is  required  to 
accomplish  by  statute  or  by  executive 
order  of  the  President;  or 

(ii)  If  the  information  is  to  be  used  by 
DOE  in  making  a  determination  about 
the  individual,  whether  the  requester 
believes  such  information  is  as  accurate, 
relevant,  timely  or  complete  as  is 
reasonably  necessary  to  assure  fairness 
in  the  determination. 

(4)  A  request  for  correction  or 
amendment  of  a  record  should  include 
the  elements  listed  in  subparagraphs  (2) 
(i)  and  (ii)  of  this  paragraph.  The  request 
shall  also  specify  the  nature  of  the 
amendment  sought,  including  the 
specific  words  to  be  deleted  or  added 
and  shall  present  justification  for  the 
requested  change,  including  any 
available  supporting  documents.  The 
statement  of  justification  for  the  change 
should  identify  the  basis  for  the  request 
(i.e.,  whether  the  information  in  the 
record  is  believed  to  be  unnecessary, 
inaccurate,  irrelevant,  untimely  or 
incomplete). 
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(c)  Any  request  not  addressed  and 
marked  as  specified  in  paragraph  (a)  of 
this  section  shall  be  forwarded 
immediately  to  the  appropriate  Privacy 
Act  Officer.  An  improperly  addressed 
request  will  not  be  deemed  to  have  been 
received  for  purposes  of  measuring  time 
periods  pursuant  to  §  §  1008.7  and 
1008.10  until  actual  receipt  by  the 
appropriate  Privacy  Act  Officer.  The 
individual  making  the  request  shall  be 
notified  that  the  request  was  improperly 
addressed  and  the  date  when  the 
request  wes  received  by  the  Privacy  Act 
Officer. 

(d)  Assistance  in  preparing  an  access 
request  pursuant  to  this  section  may  be 
obtained  from  any  DOE  Privacy  Act 
Officer  at  the  locations  listed  at 

§  1008.2(e). 

(e)  An  individual  shall  not  be  required 
to  state  a  reason  or  otherwise  justify  his 
request  for  information,  access  to,  or 
correction  of  a  record  pertaining  to  him/ 
her  that  is  contained  in  a  system  of 
records. 

§  1008.7  Processing  of  requests. 

(a)  Receipt  of  a  request  made  in 
accordance  with  §  1008.6  of  this  part 
shall  be  promptly  acknowledged  by  the 
Privacy  Act  Officer. 

(b)  Each  request  shall  be  acted  upon 
promptly.  Every  effort  will  be  made  to 
respond  within  ten  working  days  of  the 
date  of  receipt  by  the  System  Manager 
or  designee.  If  a  response  cannot  be 
made  within  ten  working  days,  the 
appropriate  Privacy  Act  Officer  shall 
send  an  interim  response  providing 
information  on  the  status  of  the  request, 
including  an  estimate  of  the  time  within 
which  action  is  expected  to  be  taken  on 
the  request  and  asking  for  any  further 
information  as  may  be  necessary  to 
respond  to  the  request  Action  will  be 
completed  as  soon  as  possible,  but  not 
later  than  20  working  days  after  receipt 
of  the  original  specific  inquiry.  In 
unusual  circumstances  and  for  good 
cause,  the  appropriate  Privacy  Act 
Officer  may  decide  that  action  cannot 
be  completed  within  the  initial  20 
working  days.  In  such  case,  the 
appropriate  Privacy  Act  Officer  will 
advise  the  individual  of  the  reason  for 
the  delay  and  the  date  (not  to  exceed  an 
additional  20  working  days)  by  which 
action  can  be  expected  to  be  completed. 

(c)  The  term  “unusual  circumstances” 
as  used  in  this  section  includes 
situations  where  a  search  for  requested 
records  from  inactive  storage  is 
necessary;  cases  where  a  voluminous 
amount  of  data  is  involved;  instances 
where  information  on  other  individuals 
must  be  separated  or  expunged  from  the 
particular  record;  and  cases  where 
consultation  with  other  agencies  which 


have  substantial  interest  in  the  response 
to  the  request  is  necessary. 

(d)  Upon  receiving  a  request,  the 
Privacy  Act  Officer  shall  ascertain 
which  System  Manager  or  Managers  of 
the  DOE  have  primary  responsibility  for, 
custody  of,  or  concern  with  the  system 
of  systems  of  records  subject  to  the 
request  and  shall  forward  the  request  to 
such  System  Manager  or  Managers.  The 
System  Manager  or  Managers  shall 
promptly  identify  and,  in  consultation 
with  the  General  Counsel,  review  the 
records  encompassed  by  the  request. 

(e)  Where  a  request  files  pursuant  to 
§  1008.6  involves  records  in  the  files  of 
the  DOE  that  have  been  obtained  from 
other  Federal  agencies  or  that  contain 
information  obtained  from  other  Federal 
agencies,  the  Privacy  Act  Officer  shall 
do  the  following: 

(1)  Where  an  entire  record  originated 
in  another  agency,  refer  the  request  to 
the  originating  agency,  and  inform  the 
requesting  party  of  the  appropriate 
official  with  whom  to  pursue  his  request. 

(2)  Where  a  DOE  record  contains 
information  received  from  another 
agency,  coordinate  with  the  responsible 
official  of  the  other  agency.  Such 
coordination  will  be  conducted  on  an 
expedited  basis,  for  the  purposes  of 
determining  whether  the  other  agency 
official  wishes  to  deny  the  request  and 
of  obtaining  the  certification,  signature, 
and  identity  of  the  other  agency’s 
responsible  official.  The  notice  of 
determination  to  the  requesting  party,  in 
the  event  part  or  all  of  the  record  is 
denied  by  the  other  agency,  shall  cite 
the  other  agency’s  responsible  official, 
as  well  as  the  appropriate  DOE  official 
if  a  denial  by  DOE  is  also  involved. 

(f)  Where  the  request  is  for  access  to 
or  information  about  records,  after 
reviewing  the  material  the  System 
Manager  or  Mangers  concerned  shall 
transmit  to  the  Privacy  Act  Officer  the 
requested  material.  The  transmission  to 
the  Privacy  Act  Officer  shall  include  any 
recommendation  that  the  request  be 
granted  or  wholly  or  partially  denied 
and  shall  set  forth  any  exemption 
categories  supporting  denials.  Any 
denial  recommendation  must  be 
concurred  in  by  the  appropriate  General 
Counsel. 

(g)  Where  the  request  is  for  correction 
or  amendment  or  records,  after 
reviewing  the  material  the  System 
Manager  or  Managers  shall  transmit  a 
recommended  decision  to  the  Privacy 
Act  Officer.  Any  recommendation  that 
the  request  be  granted  or  wholly  or 
partialliy  denied  shall  set  forth  the 
policy  considerations  and  any  statutory 
basis  supporting  denials.  Any 
recommendation  of  denial  must  be 
concurred  in  by  General  Counsel. 


§  1008.8  Action  in  response  to  a  request 
for  access:  Disclosure  of  requested 
information  to  subject  individuals. 

(а)  Consistent  with  the 
recommendation  of  the  System  Manager 
and  the  concurrence  of  the  appropriate 
General  Counsel,  the  Privacy  Act 
Officer  shall  provide  to  the  requesting 
individual  the  information  about  or 
access  to  a  record  or  information 
pertaining  to  the  individual  contained  in 
a  system  of  records,  unless  the  request 
is  being  denied  in  accordance  with 

§  1008.9.  The  Privacy  Act  Officer  shall 
notify  the  individual  of  such 
determination  and  provide  the  following 
information: 

(1)  Whether  there  is  information  of  a 
record  pertaining  to  him  that  is 
contained  in  a  system  of  records; 

(2)  The  methods  of  access  as  set  forth 
in  paragraph  (b)  of  this  section; 

(3)  The  place  at  which  the  record  or 
information  may  be  inspected; 

(4)  The  earliest  date  on  which  the 
record  or  information  may  be  inspected 
and  the  period  of  time  that  the  record  or 
information  will  remain  available  for 
inspection.  In  no  event  shall  the  earliest 
date  be  later  than  thirty  calendar  days 
from  the  date  of  notification. 

(5)  An  indication  that  copies  of  the 
records  are  enclosed,  or  the  estimated 
date  by  which  a  copy  of  the  record  could 
be  mailed  and  the  estimate  of  fees  that 
would  be  charged  to  provide  other  than 
the  first  copy  of  the  record,  pursuant  to 

§  1008.13. 

(б)  The  fact  that  the  individual,  if  he 
wishes,  may  be  accompanied  by  another 
person  during  the  in-person  review  of 
the  record  or  information,  provided  that 
the  individual  shall  first  furnish  to  the 
Privacy  Act  Officer  a  written  statement 
authorizing  disclosure  of  that 
individual’s  record  in  the  accompanying 
person’s  presence;  and 

(7)  Any  additional  requirements  that 
must  be  satisfied  in  order  to  provide 
information  about  or  to  grant  access  to 
the  requested  record  or  information. 

(b)  The  following  methods  of  access  to 
records  or  information  pertaining  to  an 
individual  and  contained  in  a  system  of 
records  may  be  available  to  that 
individual  depending  on  the 
circumstances  of  a  particular  request: 

(1)  A  copy  of  the  record  may  be 
enclosed  with  the  initial  response  in 
accordance  with  paragraph  (a)  of  this 
section; 

(2)  Inspection  in  person  may  be 
arranged  during  the  regular  business 
hours  of  the  DOE  in  the  office  specifed 
by  the  Privacy  Act  Officer, 

(3)  Transfer  of  records  to  a  Federal 
facility  more  convenient  to  the 
individual  may  be  arranged,  but  only  if 
the  Privacy  Act  Officer  determines  that 
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a  suitable  facility  is  available,  that  the 
individual's  access  can  be  properly 
supervised  at  that  facility,  and  that 
transmittal  of  the  records  or  information 
to  that  facility  will  not  unduly  interfere 
with  operations  of  the  DOE  or  involve 
unreasonable  costs,  in  terms  of  money 
or  manpower;  and 

(4)  The  requested  number  of  copies  in 
addition  to  the  initial  copy  may  be 
mailed  at  the  request  of  the  individual, 
subject  to  payment  of  the  fees 
prescribed  in  §  1008.13. 

(c)  If  the  Privacy  Act  Officer  believes, 
based  upon  a  recommendation  of  the 
System  Manager,  that  disclosure  of 
medical  and/or  psychological 
information  directly  to  an  individual 
could  have  an  adverse  effect  upon  that 
individual,  the  individual  may  be  asked: 

(1)  To  designate  in  writing  a  physician 
or  mental  health  professional  to  whom 
he  would  like  the  records  to  be 
disclosed;  or 

(2)  To  submit  a  signed  statement  by 
his  physician  or  a  mental  health 
professional  indicating  that,  in  his  view, 
disclosure  of  the  requested  records  or 
information  directly  to  the  individual 
will  not  have  an  adverse  effect  upon  the 
individual. 

(d)  The  Privacy  Act  Officer  shall 
supply  such  other  information  and 
assistance  at  the  time  of  an  individual’s 
review  of  his  record  as  is  necessary  to 
make  the  record  intelligible  to  the 
individual. 

(e)  The  DOE  reserves  the  right  to  limit 
access  to  original  records  by  allowing 
access  only  to  copies  and  abstracts  of 
original  records.  This  election  would  be 
appropriate,  for  example,  when  the 
record  is  in  an  automated  data  medium 
such  as  tape  or  disc,  when  the  record 
contains  information  on  or  about 
individuals  other  than  the  individual  to 
whom  the  record  pertains,  or  when 
information  is  deleted  under  exemptions 
provided  by  the  Privacy  Act.  In  no  event 
shall  original  records  of  the  DOE  be 
made  available  to  the  individual  except 
under  the  immediate  supervision  of  the 
Privacy  Act  Officer  or  his  designee. 

§  1008.9  Action  in  response  to  a  request 
for  access:  Initial  denial  of  access. 

(a)  A  request  by  an  individual  for 
information  about  or  access  to  a  record 
or  information  pertaining  to  that 
individual  that  is  contained  in  a  system 
of  records  may  be  denied  only  upon  a 
determination  by  the  appropriate 
System  Manager,  with  the  concurrence 
of  the  appropriate  General  Counsel, 
that: 

(1)  The  record  is  subject  to  an 
exemption  under  §  1006.12  of  this  part  or 


to  an  exemption  claimed  by  another 
agency; 

(2)  The  record  is  information  compiled 
in  reasonable  anticipation  of  a  civil 
action  or  proceeding;  or 

(3)  The  individual  has  unreasonably 
failed  to  comply  with  the  procedural 
requirements  of  this  part. 

(b)  The  Privacy  Act  Officer  shall  give 
written  notice  of  the  denial  of  a  request 
of  information  about  or  access  to 
records  or  information  pertaining  to  the 
individual  and  contained  in  a  system  of 
records.  Such  written  notice  shall  be 
sent  by  certified  or  registered  mail, 
return  receipt  requested  and  shall 
include  the  following  information: 

(1)  The  System  Manager’s  name  and 
title; 

(2)  The  reasons  for  the  denial, 
including  citation  to  the  appropriate 
sections  of  the  Privacy  Act  and  this  part; 
and 

(3)  Notification  of  the  individual’s 
right  to  appeal  the  denial  pursuant  to 
§  1008.11  of  this  part  and  to 
administrative  and  judicial  review  under 
5  U.S.C.  552a(g)(l)(B),  as  limited  by 
552a(g)(5). 

(c)  Where  a  record  containing 
information  about  an  individual  also 
contains  information  not  pertaining  to 
him,  the  portion  not  pertaining  to  the 
individual  shall  not  be  disclosed,  except 
to  the  extent  that  the  information  is 
available  to  any  person  under  the 
Freedom  of  Information  Act.  If  the 
record  sought  cannot  be  provided  for 
review  and  copying  in  a  meaningful 
form,  the  Privacy  Act  Officer  may 
provide  to  the  individual  a  report  of  the 
information  pertaining  to  the  individual 
that  is  contained  in  the  record,  which 
report  shall  be  complete  and  accurate  in 
all  material  aspects. 

(d)  Nothing  in  this  section  shall: 

(1)  Require  the  furnishing  of 
information  or  records  that  are  not 
retrieved  by  the  name  or  by  some  other 
identifying  number,  symbol  or 
identifying  particular  of  the  individual 
making  the  request; 

(2)  Prevent  a  System  Manager  from 
waiving  any  exemption  authorizing  the 
denial  of  records,  in  accordance  with 

§  1008.12. 

§  1008.10  Action  in  response  to  a  request 
for  correction  or  amendment  of  records. 

(a)  The  Privacy  Act  Officer  must 
respond  in  writing  to  the  requester  for 
amendment  of  a  record  within  10 
working  days  of  receipt.  This  response 
shall  inform  the  requester  of  the 
decision  whenever  possible. 

(b)  If  the  decision  cannot  be  reached 
within  10  working  days,  the  requester 
shall  be  informed  of  the  reason  for  delay 
and  the  date  (within  20  working  days)  it 


is  expected  that  the  decision  will  be 
made. 

(c)  The  Privacy  Act  Officer,  consistent 
with  the  recommendation  of  the  System 
Manager  or  Managers,  as  concurred  in 
by  the  appropriate  General  Counsel,  if 
appropriate,  shall  do  one  of  the 
following: 

(1)  Instruct  the  System  Manager  to 
make  the  requested  correction  or 
amendment;  and  advise  the  individual  in 
writing  of  such  action,  providing  either  a 
copy  of  the  corrected  or  amended 
record,  or  a  statement  as  to  the  means 
whereby  the  correction  or  amendment 
was  accomplished  in  cases  where  a 
copy  cannot  be  provided  (for  example, 
erasure  of  information  from  a  record 
maintained  only  in  an  electronic  data 
bank);  or 

(2)  Inform  the  individual  in  writing 
that  his  request  is  denied  in  whole  or  in 
part.  Such  denial  shall  be  sent  by* 
certified  or  registered  mail,  return 
receipt  requested,  and  shall  provide  the 
following  information: 

(i)  The  System  Manager's  name  and 
title; 

(ii)  The  reasons  for  the  denial, 
including  citation  to  the  appropriate 
sections  of  the  Act  and  this  part;  and 

(iii)  Notification  of  the  individual's 
right  to  appeal  the  denial  pursuant  to 
§  1008.11  of  this  part  and  to 
administrative  and  judicial  review  under 
5  U.S.C.  552a(g)(l)(B),  as  limited  by  5 
U.S.C.  552a(g)(5). 

(iv)  Notification  of  the  right  of  the 
individual  to  submit  a  statement  of 
disagreement  consistent  with 

§  1008.11(g). 

(b)  Whenever  an  individual’s  record  is 
amended  pursuant  to  a  request  by  that 
individual  the  Privacy  Act  Officer  or  the 
System  Manager,  as  appropriate,  shall 
notify  all  persons  and  agencies  to  which 
the  amended  portion  of  the  record  had 
been  disclosed  prior  to  its  amendment,  if 
an  accounting  of  such  disclosure  was 
required  by  the  Act.  The  notification 
shall  request  a  recipient  agency 
maintaining  the  record  to  acknowledge 
receipt  of  the  notification,  to  correct  or 
amend  the  record  and  to  apprise  an 
agency  or  person  to  which  it  had 
disclosed  die  record  of  the  substance  of 
the  amendment 

(c)  The  following  criteria  will  be  taken 
into  account  by  the  DOE  in  reviewing  a 
request  for  amendment: 

(1)  The  sufficiency  of  the  evidence 
submitted  by  the  individual; 

(2)  The  factual  accuracy  of  the 
information; 

(3)  The  relevance  and  necessity  of  the 
information  in  relation  to  the  purpose 
for  which  it  was  collected; 

(4)  If  such  information  is  used  in 
making  any  determination  about  the 
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individual,  whether  the  information  is  as 
accurate,  relevant,  timely,  and  complete 
as  is  reasonably  necessary  to  assure 
fairness  to  the  individual  in  such 
determination; 

(5)  The  degree  of  possibility  that 
denial  of  the  request  could  unfairly 
result  in  a  determination  adverse  to  the 
individual; 

(6)  The  nature  of  the  record  sought  to 
be  corrected  or  amended;  and 

(7)  The  propriety  and  feasibility  of 
complying  with  the  specific  means  of 
amendment  requested  by  the  individual. 

(d)  The  DOE  will  not  undertake  to 
gather  evidence  for  the  individual,  but 
does  reserve  the  right  to  verify  the 
evidence  that  the  individual  submits. 

(e)  Amendment  of  a  record  requested 
by  an  individual  may  be  denied  upon  a 
determination  that: 

(1)  The  individual  has  failed  to 
establish,  by  a  preponderance  of  the 
evidence,  the  propriety  of  the 
amendment  in  relation  to  the  criteria 
stated  in  paragraph  (c)  of  this  section; 

(2)  The  record  sought  to  be  amended 
was  compiled  in  a  terminated  judicial, 
quasi-judicial  or  quasi-legislative 
proceeding  to  which  the  individual  was 
a  party  or  participant; 

(3)  The  record  sought  to  be  amended 
is  the  subject  of  a  pending  judicial, 
quasi-judicial  or  quasi-legislative 
proceeding  to  which  the  individual  is  a 
party  or  participant; 

(4)  The  amendment  would  violate  a 
duly  enacted  statute  or  promulgated 
regulation; 

(5)  The  individual  has  unreasonably 
failed  to  comply  with  the  procedural 
requirements  of  this  part;  or 

(6)  The  record  has  been  properly 
exempted  from  the  provisions  of 
subsection  (d)  of  the  Privacy  Act. 

(f)  Nothing  in  this  section  shall  restrict 
the  DOE  from  granting  in  part  or 
denying  in  part  a  request  for  amendment 
of  records. 

§  1008. 1 1.  Appeals  of  denials  of  requests 
pursuant  to  §  1008.6. 

(a)  Any  individual  may  appeal  the 
denial  of  a  request  made  by  him  for 
information  about  or  for  access  to  or 
correction  or  amendment  of  records.  An 
appeal  shall  be  filed  within  30  calendar 
days  after  receipt  of  the  denial.  When 
an  appeal  is  filed  by  mail,  the  postmark 
is  conclusive  as  to  timeliness.  The 
appeal  shall  be  in  writing.  The  words 
“PRIVACY  ACT  APPEAL”  should 
appear  in  capital  letters  on  the  envelope 
and  the  letter.  The  appeal  must  be 
signed  by  the  individual  and  shall  be 
filed,  as  appropriate,  with  the  Assistant 
Director  for  Agency  Compliance  and 
Evaluation,  Office  of  Personnel 
Management  (OPM),  1900  E  Street,  NW., 


Washington,  DC  20415,  or  the  Director, 
Office  of  Hearings  and  Appeals  (OHA), 
Department  of  Energy,  Headquarters, 
Washington,  DC.  For  records 
maintained  in  government-wide  systems 
of  records  reported  by  OPM,  appeals 
shall  be  directed  to  the  Assistant 
Director  for  Agency  Compliance  and 
Evaluation,  OPM. 

(b)  An  appeal  not  addressed  and 
marked  as  specified  in  paragraph  (a)  of 
this  section  shall  be  forwarded 
immediately  to  the  Assistant  Director 
for  Agency  Compliance  and  Evaluation, 
OPM,  or  the  Director,  OHA.  An  appeal 
that  is  not  properly  addressed  by  an 
individual  shall  not  be  deemed  to  have 
been  received  for  purposes  of  measuring 
the  time  periods  in  this  section  until 
actual  receipt  of  the  appeal  by  the 
Assistant  Director,  OPM,  or  the  Director, 
OHA.  In  each  instance  when  an  appeal 
so  forwarded  is  received,  the  individual 
filing  the  appeal  shall  be  notified  that 
the  appeal  was  improperly  addressed 
and  the  date  when  the  appeal  was 
received  by  the  Assistant  Director, 

OPM,  or  the  Director,  OHA. 

(c)  The  appeal  shall  include  the 
following: 

(1)  A  copy  of  the  original  request  for 
access  of  for  amendment; 

(2)  A  copy  of  the  initial  denial;  and 

(3)  A  statement  of  the  reasons  why 
the  initial  denial  is  believed  to  be  in 
error. 

(d)  The  records  or  record  to  which  the 
individual  was  denied  access,  of  which 
was  requested  to  be  corrected  or 
amended,  will  be  supplied  to  the 
appropriate  appeal  authority  by  the 
Privacy  Act  Officer  who  issued  the 
initial  denial.  While  such  records 
normally  will  comprise  the  entire  record 
on  appeal,  the  appeal  authority  may 
seek  such  additional  information  as  is 
necessary  to  assure  that  the  final 
determination  is  fair  and  equitable. 

(e)  No  personal  appearance  or  hearing 
on  appeal  will  be  allowed. 

(f)  The  appropriate  appeal  authority 
for  DOE  records  shall  act  upon  the 
appeal  and  issue  a  final  determination 
in  writing  no  later  than  20  working  days 
from  the  date  on  which  the  appeal  is 
received.  However,  the  appeal  authority 
may  extend  the  ten-day  period  upon  a 
determination  that  a  fair  and  equitable 
review  cannot  be  made  within  that 
period.  In  such  cases  the  individual  shall 
be  advised  in  writing  of  the  reason  for 
the  extension  and  of  the  estimated  date 
by  which  a  final  determination  will  be 
issued.  The  final  determination  shall  be 
issued  not  later  than  the  30th  working 
day  after  receipt  of  the  appeal  unless 
unusual  circumstance,  as  defined  in 

§  1008.7,  are  present,  whereupon  an 
additional  30  days  may  be  extended. 


(g)  If  an  appeal  of  a  denial  of  access  is 
granted,  a  copy  of  the  determination 
shall  be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  Upon 
receipt  of  the  determination,  the  Privacy 
Act  Officer  promptly  shall  take  action 
consistent  with  §  1008.8. 

(h)  If  an  appeal  of  a  denial  of 
correction  or  amendment  is  granted,  the 
final  determination  shall  identify  the 
specific  corrections  or  amendments  to 
be  made.  A  copy  of  the  determination 
shall  be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  Upon 
receipt  of  the  determination,  the  Privacy 
Act  Officer  promptly  shall  take  steps  to 
insure  that  the  actions  set  forth  in 

§  1008.10  (a)  and  (b)  are  taken. 

(i)  If  the  appeal  of  a  denial  of  access  is 
denied,  the  final  determination  shall 
state  the  reasons  for  the  denial  and  shall 
be  transmitted  promptly  to  the 
individual,  the  Privacy  Act  Officer  and 
the  appropriate  System  Manager.  The 
determination  shall  also  include  a 
statement  identifying  the  right  of  the 
individual  to  administrative  and  judicial 
review  pursuant  to  5  U.S.C.  552a(g)(l)(B) 
as  limited  by  5  U.S.C.  552a(g)(5). 

(j)  If  the  appeal  of  a  denial  of 
correction  or  amendment  is  denied,  the 
final  determination  shall  state  the 
reasons  for  the  denial  and  shall  be 
transmitted  promptly  to  the  individual, 
the  Privacy  Act  Officer  and  the 
appropriate  System  Manager. 

(1)  The  determination  also  shall 
include  the  following: 

(i)  Notice  of  the  right  of  the  individual 
to  file  with  the  Privacy  Act  Officer  a 
concise  signed  statement  of  reasons  for 
disagreeing  with  the  final  determination, 
receipt  of  which  statement  will  be 
acknowledged  by  the  Privacy  Act 
Officer. 

(ii)  An  indication  that  any 
disagreement  statement  filed  by  the 
individual  will  be  noted  and  appended 
to  the  disputed  record  and  that  a  copy  of 
the  statement  will  be  provided  by  the 
Privacy  Act  Officer  or  the  System 
Manager,  as  appropriate,  to  persons  and 
agencies  to  which  the  record  is 
disclosed  subsequent  to  the  date  of 
receipt  of  such  statement; 

(iii)  An  indication  that  the  DOE  shall 
append  to  any  disagreement  statement 
filed  by  the  individual  a  copy  of  the  final 
(letermination  or  a  summary  thereof, 
which  determination  or  summary  also 
will  be  provided  to  persons  and 
agencies  to  which  the  disagreement 
statement  is  disclosed;  and, 

(iv)  A  statement  of  the  right  of  the 
individual  to  administrative  and  judicial 
review  under  5  U.S.C  552a(g)(l)(B),  as 
limited  by  5  U.S.C.  552a(g)(5). 
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(2)  Although  a  copy  of  the  final 
determination  or  a  summary  thereof  will 
be  treated  as  part  of  the  individual’s 
record  for  purposes  of  disclosure  in 
instances  where  the  individual  has  filed 
a  disagreement  statement,  it  will  not  be 
subject  to  correction  or  amendment  by 
the  individual. 

(3)  Where  an  individual  files  a 
statement  of  disagreement  consistent 
with  subparagraph  (1)  of  this  paragraph, 
the  Privacy  Act  Officer  shall  take  steps 
to  insure  that  the  actions  provided  in 
subparagraphs  (1)  (i),  (ii)  and  (iii)  are 
taken. 

§  1008.12  Exemptions. 

(a)  General  exemptions — (1) 

Generally.  5  U.S.C.  552a(j)(2)  allows  the 
exemption  of  any  system  of  records 
within  the  DOG  from  any  part  of  section 
552a  except  subsections  (b),  (c)  (1)  and 
(2),  (e)(4)  (A)  through  (F)  (e)(6),  (7).  (9), 
(10),  and  (11),  and  (i)  if  the  system  of 
records  is  maintained  by  a  DOE 
component  which  performs  as  its 
principal  function  any  activity 
pertaining  to  the  enforcement  of 
criminal  laws,  including  police  efforts  to 
prevent,  control,  or  reduce  crime  or  to 
apprehend  criminals,  and  which  consists 
of  (A)  information  compiled  for  the 
purpose  of  identifying  individual 
criminal  offenders  and  alleged 
offenders;  (B)  information  compiled  for 
the  purpose  of  a  criminal  investigation, 
including  reports  of  informants  and 
investigators,  and  associated  with  an 
identifiable  individual;  or  (C)  reports 
identifiable  to  an  individual  compiled  at 
any  stage  of  the  process  of  enforcement 
of  the  criminal  laws  from  arrest  or 
indictment  through  release  from 
supervision. 

(2)  Applicability  of  general 
exemptions  to  DOE  systems  of 
records — (i)  Investigative  Files  of  the 
Inspector  General  (DOE-54).  This 
system  of  records  is  being  exempted 
pursuant  to  subsection  (j)(2)  of  section 
552a  in  order  to  aid  the  Office  of  the 
Inspector  General  in  the  performance  of 
its  law  enforcement  function.  The 
system  is  exempted  from  subsections  (c) 
(3)  and  (4);  (d)(l)-(4);  (e)(l)-{3);  (4)(G), 
(H),  and  (I);  (5)  and  (8);  and  (g).  The 
system  is  exempt  from  these  provisions 
for  the  following  reasons:  Notifying  an 
individual  at  the  individual’s  request  of 
the  existence  of  records  in  an 
investigative  file  pertaining  to  such 
individual,  or  granting  access  to  an 
investigative  file  coqld  (A)  interfere  with 
investigative  and  enforcement 
proceedings  and  with  co-defendants’ 
right  to  a  fair  trial;  (B)  disclose  the 
identity  of  confidential  sources  and 
reveal  confidential  information  supplied 


by  these  sources;  and  (C)  disclose 
investigative  techniques  and  procedures. 

(b)  Specific  exemptions  (1)  Generally. 

5  U.S.C.  552a(k)  allows  the  exemption  of 
any  system  of  records  within  the  DOE 
from  subsections  (c)(3),  (d),  (e)(1), 
(e)(4)(G),  (H),  and  (I),  and  (f)  of  section  3 
of  the  Privacy  Act,  if  the  system  of 
records  consists  of: 

(i)  Records  that  are  specifically 
authorized  under  criteria  established 
under  statute  or  an  Executive  Order  to 
be  kept  secret  in  the  interest  of  national 
defense  or  foreign  policy,  and  are  in  fact 
properly  classified  pursuant  to  such 
statute  or  Executive  Order.  Restricted 
Data  and  Formerly  Restricted  Data 
under  the  Atomic  Energy  Act  of  1954,  as 
amended,  are  included  in  this 
exemption. 

(ii)  Investigatory  material  compiled 
for  law  enforcement  purposes:  Provided, 
however.  That  if  any  individual  is 
denied  any  right,  privilege,  or  benefit  to 
which  he  would  otherwise  be  entitled  by 
Federal  law,  or  for  which  he  would 
otherwise  be  eligible,  as  a  result  of  the 
maintenance  of  such  material,  such 
material  shall  be  provided  to  such 
individual,  except  to  the  extent  that  the 
disclosure  of  such  material  would  reveal 
the  identity  of  a  source  who  furnished 
information  to  the  Government  under  an 
express  promise  that  the  identity  of  the 
source  would  be  held  in  confidence,  or, 
prior  to  September  27, 1975,  under  an 
implied  promise  that  the  identity  of  the 
source  would  be  held  in  confidence. 

(iii)  Records  by  statute  to  be 
maintained  and  used  solely  as  statistical 
records. 

(iv)  Investigatory  material  compiled 
solely  for  the  purposes  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment, 
military  service,  Federal  contracts,  or 
access  to  classified  information,  but 
only  to  the  extent  that  the  disclosure  of 
such  material  would  reveal  the  identity 
of  a  source  who  furnished  information  to 
the  Government  under  an  express 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence,  or,  prior  to 
September  27, 1975,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

(v)  Testing  or  examination  material 
used  solely  to  determine  individual 
qualifications  for  appointment  or 
promotion  in  the  Federal  service,  the 
disclosure  of  which  would  compromise 
the  objectivity  or  fairness  of  the  testing 
or  examination  process. 

(2)  Applicability  of  specific 
exemptions  to  DOE  systems  of 
records. — (i)  Exempt  under  5  U.S.C. 
552a(k)(2)  (see  subparagraph  (l)(ii)  of 
this  paragraph)  and  (k)(5)  (see 
subparagraph  (l)(iv)  of  this  paragraph). 


The  following  systems  of  records  are 
exempted  from  5  U.S.C.  552a(c)(3) 
(accounting  of  disclosures),  (d)  (access 
to  records),  and  (e)(1)  (types  of 
information  maintained).  The  reasons 
for  asserting  exemption  (k)(2)  are:  To 
prevent  subjects  of  investigation  from 
frustrating  the  investigatory  process;  to 
insure  the  proper  functioning  and 
integrity  of  law  enforcement  activities, 
to  prevent  disclosure  of  investigative 
techniques;  and  to  maintain  the  ability 
to  obtain  necessary  information.  The 
reasons  for  asserting  the  (k)(5) 
exemption  are:  To  maintain  the  ability 
to  obtain  candid  and  necessary 
information;  to  fulfill  commitments 
made  to  sources  to  protect  the 
confidentiality  of  information;  to  avoid 
endangering  these  sources;  and,  to 
facilitate  proper  selection  or 
continuance  of  the  best  applicants  or 
persons  for  a  given  position  or  contract: 

(A)  DOE-1,  DOE  Personnel  and 
General  Employment  Records  (only 
personnel  investigative  records 
concerning  current  and  former  DOE 
employees  and  applicants  for 

'  employment  by  DOE); 

(B)  DOE-43,  Personnel  Security 
Clearance  Files; 

(C)  DOE-54,  Investigative  Files  of  the 
Inspector  General  (only  investigative 
records  concerning  DOE  employees, 
past  and  present). 

(ii)  Exempt  under  5  U.S.C.  552a(k)(l) 
subparagraph  (l)(i)  of  this  paragraph), 

(k) (2)  (see  subparagraph  ( l)(ii )  of  this 
paragraph)  and  (k)(5)  (see  subparagraph 

(l) (iv)  of  this  paragraph).  The  following 
systems  of  records  are  exempted  from  5 
U.S.C.  552a(c)(3)  (accounting  of 
disclosures),  (d)  (access  to  records), 

(e)(1)  (type  of  information  maintained): 

(A)  Alien  Visits  and  Participation 
(DOE-52). 

(B)  Clearance  Board  Cases  (DOE-46). 

(C)  Security  Correspondence  (DOE- 
49). 

(D)  Foreign  Travel  Records  (DOE-27). 

(E)  Legal  Office  Claims,  Litigations, 
Criminal  Violation,  Patents,  and  other 
Legal  Files  (DOE-41). 

(F)  Personnel  Security  Clearance  Files 
(DOE-43). 

(H)  Personnel  Security  Clearance 
Index  (Automated)  (DOE-42). 

(I)  Special  Access  Authorization  for 
Categories  of  Classified  Information 
(DOE-44). 

The  reasons  for  asserting  the  (k)(l) 
exemption  are  to  prevent  serious 
damage  to  the  national  defense  or 
foreign  policy  that  could  arise  from 
providing  individuals  access  to 
classified  information.  The  reasons  for 
asserting  exemptions  (k)(2)  and  (k)(5)  for 
these  systems  are  the  same  as  those  set 
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forth  in  subparagraph  (2)(v)  of  this 
paragraph 

(iii)  Exempt  under  5  U.S.C.  a(k)(5)  (see 
subparagraph  (l)(iv)  of  this  paragraph 
and  (k)(6)  (see  subparagraph  (l)(v)  of 
this  paragraph).  The  following  systems 
of  records  are  exempt  from  5  U.S.C. 
552a(c)(3)  (accounting  of  disclosures), 

(d)  (access  to  records),  and  (e)(1)  (type 
of  information  maintained: 

(A)  DOE  Personnel:  Supervisor- 
Maintained  Personnel  Records  (DOE-2). 

(B)  Applications  for  DOE  Employment 
(DOE-4). 

(C)  DOE  Personnel  and  General 
Employment  Records  (DOE-1). 

The  reason  for  asserting  the  (k)(5) 
exemption  is  the  same  as  that  set  forth 
in  subparagraph  (2)(i)  of  this  paragraph. 
The  reasons  for  asserting  the  (k)(6) 
exemption  are  to  protect  the  integtity  of 
the  personnel  testing  and  evaluation 
process  and  to  avoid  providing 
individuals  with  unfair  advantage,  by 
premature  or  unfair  disclosure  of  testing 
or  rating  information. 

(c)  Application  of  exemptions  to 
particular  requests.  (1)  The  Privacy  Act 
Officer,  consistent  with  the 
recommendation  of  the  System  Manager 
and  with  concurrence  of  the  appropriate 
General  Counsel,  may  make  available 
records  which  the  DOE  is  authorized  to 
withhold  under  this  section. 

(2)  With  respect  to  records  containing 
material  or  information  that  would 
reveal  the  identity  of  a  source  who  was 
given  an  assurance  of  confidentiality,  a 
determination  to  make  records  available 
pursuant  to  subparagraph  (1)  of  this 
paragraph  shall  be  made  only  if  the 
source  consents  to  the  release  of  such 
information  to  the  individual,  or  if  it  is 
determined  that  the  material  or 
information  is  not  adverse  or 
detrimental  to  the  individual,  or  for  good 
cause  shown.  The  exercise  of  discretion 
with  respect  to  waiver  of  the  exemption 
shall  be  final. 

(3)  Prior  to  making  a  determination  to 
deny  access  to  a  record  in  a  system  of 
records  covered  by  exemption  (k)(l)  for 
classified  material  (see  paragraph 
(b)(l)(i)  and  (b)(2)(iii)  of  this  section), 
the  System  Manager  shall  consult  with 
the  Director,  Division  of  Classification, 
to  verify  the  current  classification  status 
of  the  information  in  the  requested 
record. 

§1008.13  Fees. 

(a)  The  only  fees  to  be  charged  to  or 
collected  from  an  individual  under  the 
provisions  of  this  part  are  for  copying 
records  at  the  request  of  the  individual. 
The  fee  charged  shall  be  consistent  with 
the  fee  schedule  set  forth  in  paragraph 
(b)  of  this  section. 


(1)  No  fees  shall  be  charged  or 
collected  for  the  following:  Search  for 
and  retrieval  of  records;  review  of 
records;  copying  by  the  DOE  incident  to 
granting  access;  copying  at  the  initiative 
of  the  DOE  without  a  request  from  the 
individual;  copying  when  the  aggregate 
of  fees  for  copying  is  $25  or  less;  time 
spent  providing  copies;  transportation  of 
records  and  personnel;  and  first  class 
postage. 

(2)  It  is  the  policy  of  the  DOE  to 
provide  an  individual  with  one  copy  of 
each  record  corrected  or  amended 
pursuant  to  request  without  charge. 

(3)  As  required  by  the  Office  of 
Personnel  Management  in  its  published 
regulations  implementing  the  Act,  the 
DOE  will  charge  no  fee  for  a  single  copy 
of  a  personnel  record  covered  by  that 
Commission's  Government-wide 
published  notice  of  systems  of  records. 

(b)  The  schedule  of  fees  is  as  follows: 

(1)  $.10  per  copy  of  each  page. 

(2)  For  other  forms  of  copying  and 
other  forms  of  materials  (e.g.,  cassettes, 
computer  materials),  the  direct  cost  of 
the  materials,  personnel,  and  equipment 
shall  be  charged,  but  only  with  prior 
specific  approval  of  the  person  making 
the  request,  when  such  charges  would 
be  in  excess  of  $25. 

(c)  The  Privacy  Act  Officer  may,  upon 
application  by  an  individual,  furnish  any 
records  without  charge  or  at  a  reduced 
rate,  if  he  determines  that  such  waiver 
or  reduction  of  fees  is  in  the  public 
interest. 

(d)  Payment  shall  be  made  by  check 
or  money  order  payable  to  the  United 
States  Department  of  Energy. 

(e)  Advance  payment  of  all  or  part  of 
the  fees  may  be  required  at  the 
discretion  of  the  Privacy  Act  Officer. 
Unless  the  individual  requesting  the 
copies  specifically  states  that  he  is 
willing  to  pay  whatever  fees  are 
assessed  for  meeting  the  request  or, 
alternatively,  specifies  an  amount  in 
excess  of  $25  that  he  is  willing  to  pay 
and  which  in  fact  covers  the  anticipated 
fees  for  meeting  the  request,  a  request 
that  is  expected  to  involve  assessed  fees 
in  excess  of  $25  shall  not  be  deemed  to 
have  been  received,  for  purposes  of  the 
time  periods  specified  in  §  §  1008.7  and 
1008.10  until  the  individual  making  the 
request  is  notified  of  the  anticipated, 
cost,  agrees  to  bear  it,  and  makes  any 
advance  deposit  required.  Such 
notification  shall  be  made  by  the 
Privacy  Act  Officer  as  promptly  as 
possible  after  receipt  of  the  request. 

§  1008.14  Requests  under  false  pretenses. 

Title  5  U.S.C.  552a(i)(3)  provides  that 
any  person  who  knowingly  and  willfully 
requests  or  obtains  any  record 
concerning  an  individual  from  an  agency 


under  false  pretenses  shall  be  guilty  of  a 
misdeameanor  and  fined  not  more  than 
$5,000. 

Subpart  C— Disclosure  to  Third  Parties 

§  1008.15  Prohibition  against  disclosure. 

Except  as  provided  in  §  1008.16,  the 
DOE  shall  not  disclose  any  record  which 
is  contained  in  a  system  of  records,  by 
any  means  of  communication,  to  any 
agency  or  to  any  person  other  than  the 
individual  who  is  the  subject  of  the 
record. 

§  1008.16  Conditions  of  disclosure. 

(a)  Notwithstanding  the  prohibition 
contained  in  §  1008.15,  the  DOE  may 
disclose  records  covered  by  this  part  to 
the  individual  to  whom  the  record 
pertains  or  to  an  agency  or  to  a  person 
other  than  the  individual  where  he  has 
given  his  prior  written  consent  to  the 
disclosure  or  has  made  a  written  request 
for  such  disclosure. 

(b)  Notwithstanding  the  prohibition 
contained  in  §  1008.15  the  DOE  may  also 
disclose  records  covered  by  this  part 
whenever  the  disclosure  is: 

(1)  To  officers  and  employees  of  the 
DOE  who  have  a  need  for  the  record  in 
the  performance  of  their  duties; 

(2)  Required  under  the  Freedom  of 
Information  Act  (5  U.S.C.  552); 

(3)  For  a  routine  use  as  defined  in 
§  1008.2  and  described  in  the  Federal 
Register  notice  for  that  system  of 
records; 

(4)  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity 
pursuant  to  the  provisions  of  Title  13  of 
the  United  States  Code: 

(5)  To  a  recipient  who  has  provided 
the  agency  with  advance  adequate 
written  assurance  that  the  record  will  be 
used  solely  as  a  statistical  research  or 
reporting  record,  and  the  record  is  to  be 
transferred  in  a  form  that  is  not 
individually  identifiable; 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has 
sufficient  historical  or  other  value  to 
warrant  its  continued  preservation  by 
the  United  States  Government,  or  for 
evaluation  by  the  Administrator  of 
General  Services  or  his  designee  to 
determine  whether  the  record  has  such 
value; 

(7)  To  another  agency  or  to  an 
instrumentality  of  any  governmental 
jurisdiction  within  or  under  the  control 
of  the  United  States  or  a  civil  or  criminal 
law  enforcement  activity  if  the  activity 
is  authorized  by  law  and  if  the  head  of 
the  agency  or  instrumentality  has  made 
a  written  request  to  the  DOE  specifying 
the  particular  portion  desired  and  the 
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law  enforcement  activity  for  which  the 
record  is  sought; 

(8)  To  a  person  pursuant  to  a  showing 
of  compelling  circumstances  affecting 
the  health  or  safety  of  an  individual  if 
upon  such  disclosure  notification  is 
transmitted  to  the  last  known  address  of 
such  individual; 

(9)  To  either  House  of  Congress,  or  to 
any  committee  or  subcommittee  thereof, 
any  joint  committee  of  Congress  or 
subcommittee  of  any  such  joint 
committee,  to  the  extent  of  matter 
within  its  jurisdiction; 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives,  in 
the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office; 

(11)  Pursuant  to  the  order  of  a  court  of 
competent  jurisdiction. 

(c)  Notwithstanding  the  prohibition 
contained  in  section  §  1008.15,  the  DOE 
may  also  disclose  records  covered  by 
this  part  in  the  following  additional 
circumstances: 

(1)  5  U.S.C.  552a(c)(4)  requires 
dissemination  of  a  corrected  or 
amended  record  or  notation  of  a 
disagreement  statement  by  the  DOE  in 
certain  circumstances; 

(2)  To  the  Office  of  Management  and 
Budget  in  the  performance  of  its  duties 
under  section  6  of  the  Privacy  Act, 
which  authorizes  continuing  oversight 
and  assistance  in  implementation  of  the 
Act,  which  may  necessitate  the  release 
of  records  or  information  to  that  Office. 

§  1008.17  Accounting  for  disclosures. 

(a)  For  each  disclosure  of  information 
contained  in  a  system  of  records  under 
his  control,  except  disclosures  to 
authorized  officers  and  employees  of 
DOE  and  disclosures  required  by  the 
Freedom  of  Information  Act,  the 
appropriate  System  Manager  shall  keep 
an  accurate  accounting  of: 

(1)  The  date,  nature,  and  purposes  of 
each  disclosure  of  a  record  made  to  any 
person  or  to  another  agency;  and 

(2)  The  name  and  address  of  the 
person  or  agency  to  which  the 
disclosure  was  made. 

(b)  The  accounting  shall  be  retained 
for  at  least  five  years  or  the  life  of  the 
record,  whichever  is  longer,  after  the 
disclosure  for  which  the  accounting  is 
made. 

(c)  The  accounting  described  in 
paragraph  (a)  of  this  section  shall  be 
made  available  to  the  individual  named 
in  the  record  upon  written  request  to  the 
Privacy  Act  Officer  at  the  appropriate 
DOE  location  listed  at  §  1008.2(e). 
However,  the  accounting  shall  not  be 
revealed  with  respect  to  disclosures 
made  under  §  1008.16(b)(7)  of  this  part, 
pertaining  to  law  enforcement  activity; 
or  with  respect  to  disclosures  involving 


system  of  records  for  which  DOE  had 
claimed  an  exemption  from  certain 
requirements  of  the  Act,  as  provided  in 
§  1008.12;  or  with  respect  to  which 
another  agency  has  claimed  an 
exemption. 

(d)  Whenever  an  amendment  or 
correction  of  a  record  or  a  notation  of 
dispute  concerning  the  accuracy  of 
records  is  made  by  the  DOE  in 
accordance  with  §  1008.10(a)(2)(iv)  and 
§  1008.11(g),  DOE  shall  inform  any 
person  or  other  agency  to  whom  the 
record  was  previously  disclosed  if  an 
accounting  of  the  disclosure  was  made 
pursuant  to  the  requirements  of 
paragraph  (a)  of  this  section,  unless  the 
disclosure  was  made  pursuant  to  section 
§  1008.16(b)(7);  or  the  disclosure 
involved  a  system  or  records  of  which 
DOE  has  claimed  an  exemption  from 
certain  requirements  of  the  Act,  as 
provided  in  §  1008.12;  or  with  respect  to 
which  another  agency  has  claimed  an 
exemption. 

(e)  The  System  Manager  shall  make 
reasonable  efforts  to  serve  notice  on  an 
individual  when  any  record  containing 
information  about  such  individual  in  a 
DOE  system  of  records  is  disclosed  to 
any  person  under  compulsory  legal 
process  when  such  process  becomes  a 
matter  of  public  record. 

(f)  Prior  to  disclosing  any  record  about 
an  individual  to  any  person  other  than 
an  agency,  unless  the  disclosure  is 
pursuant  to  the  Freedom  of  Information 
Act,  the  System  Manager  shall  make 
reasonable  efforts  to  assure  that  each 
record  is  accurate,  complete,  timely,  and 
relevant  for  DOE’s  purposes. 

Subpart  D— Maintenance  and 
Establishment  of  systems  of  Records 

§  1008.18  Content  of  systems  of  records. 

(a)  The  DOE  shall  maintain  in  its 
records  only  such  information  about  an 
individual  as  is  relevant  and  necessary 
to  accomplish  a  purpose  DOE  is 
required  to  accomplish  by  statute  or  by 
Executive  Order  of  the  President,  unless 
an  exemption  to  this  requirement  has 
been  claimed  by  DOE,  as  provided  in 

§  1008.12,  or  by  another  agency. 

(b)  The  DOE  shall  maintain  no  record 
describing  how  any  individual  exercises 
rights  guaranteed  by  the  First 
Amendment  unless  expressly  authorized 
by  statute  or  by  the  individual  about 
whom  the  record  is  maintained  or  unless 
it  is  pertinent  to  and  within  the  scope  of 
an  authorized  law  enforcement  activity. 

(c)  The  DOE  shall  maintain  all  records 
that  are  used  by  it  to  make  any 
determination  about  any  individual  with 
such  accuracy,  relevance,  timeliness  and 
completeness  as  is  reasonably 


necessary  to  assure  fairness  to  the 
individual  in  such  determination. 

§  1008.19  Collection  of  information  by 
DOE  about  an  individual  for  a  system  of 
records. 

(a)  The  DOE  shall  collect  information, 
to  the  greatest  extent  practicable, 
directly  from  the  subject  individual 
when  the  use  of  the  information  may 
result  in  adverse  determinations  about 
an  individual’s  rights,  benefits  and 
privileges  under  Federal  programs, 
unless  an  exemption  from  the  Act  to  this 
requirement  has  been  claimed  by  DOE 
as  provided  in  §  1008.12,  or  by  another 
agency. 

(b)  Unless  an  exemption  from  the  Act 
has  been  claimed  by  DOE,  as  provided 
in  §  1008.12,  or  by  another  agency,  DOE 
shall  inform  each  individual  whom  it 
asks  to  supply  information,  on  the  form 
or  other  means  by  which  it  uses  to 
collect  the  information,  or  on  a  separate 
form  that  can  be  retained  by  the 
individual,  of  the  following: 

(1)  The  authority  (whether  granted  by 
statute  or  by  Executive  order  of  the 
President)  that  authorizes  the 
solicitation  of  the  information  and 
whether  the  provision  of  such 
information  is  mandatory  or  voluntary; 

(2)  The  principal  purpose  or  purposes 
for  which  the  information  is  intended  to 
be  used; 

(3)  The  routine  uses  that  may  be  made 
of  the  information,  as  published  in  the 
Federal  Register  pursuant  to  the 
requirements  of  the  Act;  and 

(4)  The  effect  on  the  individual,  if  any, 
of  not  providing  all  or  any  part  of  the 
requested  information. 

§  1008.20  Use  and  collection  of  social 
security  numbers. 

(a)  The  System  Manager  of  each 
system  of  records  which  utilizes  social 
security  numbers  as  a  method  of 
identification  without  statutory 
authorization  or  authorization  by 
regulation  adopted  prior  to  January  1, 
1975,  shall  revise  the  system  to  avoid 
future  collection  and  use  of  the  social 
security  numbers. 

(b)  Heads  of  Headquarters  Divisions 
and  Offices  and  heads  of  the  other  DOE 
locations  shall  insure  that  employees 
authorized  to  collect  information  from 
individuals  are  advised  that  individuals 
may  not  be  required  to  furnish  social 
security  numbers  without  statutory  or 
regulatory  authorization,  and  that 
individuals  who  are  requested  to 
provide  social  security  numbers 
voluntarily  must  be  advised  that 
furnishing  the  number  is  not  required 
and  that  no  penalty  or  denial  of  benefits 
will  flow  from  the  refusal  to  provide  it. 
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§  1008.21  Public  notice  of  systems  of 
records. 

(a)  The  DOE  shall  publish  in  the 
Federal  Register  at  least  annually  a 
notice  of  the  existence  and  character  of 
each  of  its  systems  of  records,  which 
notice  shall  include: 

(1)  The  name  and  location  of  the 
system; 

(2)  The  categories  of  individuals  on 
whom  records  are  maintained  in  the 
system: 

(3)  The  categories  of  records 
maintained  in  the  system; 

(4)  Each  routine  use  of  the  records 
contained  in  the  system,  including  the 
categories  of  user  and  the  purpose  of 
such  use,  subject  to  paragraph  (d)  of  this 
section: 

(5)  The  policies  and  practices  of  the 
DOE  regarding  storage,  retrievability, 
access  controls,  retention,  and  disposal 
of  the  records: 

(6)  The  title  and  business  address  of 
the  DOE  official  who  is  responsible  for 
the  system  of  records; 

(7)  The  DOE  procedures  whereby  an 
individual  can  be  notified  at  his  request 
if  the  system  of  records  contains  a 
record  pertaining  to  him; 

(8)  The  DOE  procedures  whereby  an 
individual  can  be  notified  at  his  request 
about  how  he  can  gain  access  to  any 
record  pertaining  to  him  contained  in 
the  system  or  records,  and  how  he  can 
contest  its  content;  and 

(9)  The  categories  of  source  of  records 
in  the  systems. 

(b)  Notwithstanding  the  requirements 
of  paragraph  (a)  of  this  section,  the 
notice  of  systems  of  records  shall  not 
necessarily  include  the  information  in 
paragraphs  (a)(7)— (9)  of  this  section  if 
DOE  has  claimed  a  general  or  specific 
exemption  from  the  requirements  of  the 
Act,  as  provided  in  §  1008.12,  or  if  such 
exemptions  have  been  claimed  by 
another  agency. 

(c)  Copies  of  the  notices  as  printed  in 
the  Federal  Register  shall  be  available 
at  the  DOE  locations  listed  at 

§  1008.2(c).  Requests  by  mail  for  copies 
of  such  notices  should  be  sent  to  Privacy 
Act  Officer,  Headquarters,  U.S. 
Department  of  Energy,  Washington,  D.C. 
20585.  The  first  copy  will  be  furnished 
free  of  charge.  For  each  additional  copy, 
the  costs  of  printing  and  handling  may 
be  charged. 

(d)  DOE  shall  publish  in  the  Federal 
Register  notice  of  any  new  routine  use 
or  intended  routine  use  of  a  record  in 
the  system  of  records,  at  least  30 
calendar  days  prior  to  the 
implementation  of  any  new  routine  use 
of  a  record  in  a  system  of  records,  or  at 
least  30  calendar  days  prior  to 
publication  of  the  annual  notice  of  such 
routine  uses,  as  provided  in  paragraph 


(a)  of  this  section,  an  opportunity  for 
'interested  persons  to  submit  written 
comments  consisting  of  data,  views,  or 
arguments  regarding  such  use  to  DOE, 
shall  be  provided. 

(FR  Doc.  80-15924  Filed  5-23-80;  8:45  am) 
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